registry  /  @sme.up/kokos-sdk-node  /  4.2.0-SNAPSHOT.20260716122527.782

@sme.up/kokos-sdk-node@4.2.0-SNAPSHOT.20260716122527.782

Kokos SDK Node.js

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 47 file(s), 3.17 MB of source, external domains: facebook.github.io, fb.me, feross.org, github.com, instagram.com, jedwatson.github.io, mths.be, soundcloud.com, twitter.com, validator.swagger.io, www.facebook.com, www.w3.org

Source & flagged code

6 flagged · loading source
swagger/swagger-ui.jsView file
8patternName = generic_password severity = medium line = 8 matchedText = var r=n(...}));
Medium
Secret Pattern

Package contains a possible secret pattern.

swagger/swagger-ui.jsView on unpkg · L8
1!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.SwaggerUICor... L2: /*!
Medium
Dynamic Require

Package source references dynamic require/import behavior.

swagger/swagger-ui.jsView on unpkg · L1
1!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.SwaggerUICor... L2: /*!
Low
Eval

Package source references a known benign dynamic code generation pattern.

swagger/swagger-ui.jsView on unpkg · L1
swagger/swagger-ui-es-bundle-core.jsView file
8patternName = generic_password severity = medium line = 8 matchedText = var r=n(...ult;
Medium
Secret Pattern

Hardcoded password in swagger/swagger-ui-es-bundle-core.js

swagger/swagger-ui-es-bundle-core.jsView on unpkg · L8
swagger/swagger-ui-bundle.jsView file
91patternName = generic_password severity = medium line = 91 matchedText = */var r,...}));
Medium
Secret Pattern

Hardcoded password in swagger/swagger-ui-bundle.js

swagger/swagger-ui-bundle.jsView on unpkg · L91
swagger/swagger-ui-es-bundle.jsView file
91patternName = generic_password severity = medium line = 91 matchedText = */var r,...ult;
Medium
Secret Pattern

Hardcoded password in swagger/swagger-ui-es-bundle.js

swagger/swagger-ui-es-bundle.jsView on unpkg · L91

Findings

8 Medium6 Low
MediumSecret Patternswagger/swagger-ui.js
MediumDynamic Requireswagger/swagger-ui.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternswagger/swagger-ui-es-bundle-core.js
MediumSecret Patternswagger/swagger-ui-bundle.js
MediumSecret Patternswagger/swagger-ui-es-bundle.js
LowScripts Present
LowEvalswagger/swagger-ui.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings